Hard Design: Payment System (Stripe/PayPal)

What is HMAC-SHA256 signature verification used for in webhook delivery?

— Tests your understanding of this concept.

Answer Options

A To encrypt the webhook payload

B To allow merchants to verify that webhooks are genuinely sent by the payment processor and not forged

C To prevent replay attacks only

D To compress the webhook payload

Want to see the correct answer?

Get the answer with a detailed explanation, plus practice 22+ more Design: Payment System (Stripe/PayPal) questions with adaptive quizzes and timed interviews.

See the Answer on Guru Sishya →

This question is from the Design: Payment System (Stripe/PayPal) topic (System Design Cases).

Learn Design: Payment System (Stripe/PayPal) → Browse All Questions

More Design: Payment System (Stripe/PayPal) Questions

What is an idempotency key in payment processing?

Why should monetary amounts be stored as integers (cents) rather than floats?

What is double-entry bookkeeping and why is it used in payment systems?

The payment gateway times out after 10 seconds. You don't know if the charge succeeded. What do you do?

What does PCI DSS require regarding storage of credit card numbers?